They don't need to do the reeducation. Ask yourself, will there be more security breaches / issues in the future or less? Will there be more issues with governments and companies taking advantage of private users data or less? Will there be more demands for your data in the future (health, context, emotional signals) or less? I think the answers there are pretty obvious, and owning the "we care about our users, their privacy and security" frame is going to be an increasingly powerful one.